When parts of a business process are outsourced, how can you as a customer assess that your supplier provides secure services? Of course, certification of their security management process gives some trust, but control is better. This presentation is about a practical approach to check vendor security.
Main points covered:
• How to add structure to the supply chain, so that security policy domains become clear
• Various means to assess security of a supplier, from site visits to audits and technical scans
• Introduction to a lightweight and innovative scan to assess the internet security posture of a company, which delivers amazing results.
Presenter:
Pascal de Koning is qualified as Information Security professional and Cybersecurity with wide experience as consultant. Among many, he holds CISSP qualification and currently working as a Chairman of Security Services at The Open Group and SABSA Institute.